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(54) AUTHENTICATION SYSTEM AND PUBLIC KEY MANAGEMENT SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To authenticate an 

individual on-line and to make only the individual able to BEST AVAILABLE COPY 

abandon and update a public key by executing a 
unidirectional function to a terminal software prior to the 
start of communication and transmitting a calculated 
result to a host side by a terminal side and collating the 
calculated result with a true value and detecting whether \ 
or not the terminal software is altered by a server side. 
SOLUTION: A terminal software 3A substitutes a 
terminal software 3A to a secure hash function and 
transfers the calculated result to an authentication 
server 4. An authentication server 4 compares the 

received calculated result with a stored value, and when ly ^ — -* •#ju>rtm*GMm 

they match, judges that the alteration of a third person mv&aw 
does not reach the terminal software 3A and shifts to 
the processing of authenticating whether or not a person 
requesting the abandonment of the public key is a true 
owner. The true owner is authenticated by transmitting a 
'seed' to the terminal software 3A. Thus, even in the 

case that a secret key is stolen, only the individual is surely authenticated and the public key is 
safely and quickly abandoned. 
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